This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft File: Uylu4zFT725pONV6KhMsHlJtxDA.mft (raw, json) Hash identifier: vy1g7DZI55MXC8rhvPlSQUxjZTtmr6qxtZ2oqkNSNS0= Subject key identifier: 86:F5:88:2E:91:90:59:F0:F5:60:67:03:A8:BD:85:0A:20:AD:D9:00 Authority key identifier: 53:29:6E:E3:31:53:EF:6E:69:38:D5:7A:2A:13:2C:1E:52:6D:C4:30 Certificate issuer: /CN=53296ee33153ef6e6938d57a2a132c1e526dc430 Certificate serial: 019B4D3AD9A189D989DFBD51D5B34A3C1481 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft Manifest number: 1666 Signing time: Tue 23 Dec 2025 22:01:00 +0000 Manifest this update: Tue 23 Dec 2025 22:01:00 +0000 Manifest next update: Wed 24 Dec 2025 22:01:00 +0000 Files and hashes: 1: Uylu4zFT725pONV6KhMsHlJtxDA.crl (hash: 52M+htfhOP+PQvReSNDth22hODKfzUkLDj1m7/Go4Ps=) 2: kWgx2Wjql2LYt0QNUa7UD3E-ZNs.roa (hash: NPB7ZX6Td6/rM0WpZJID5mJD7qpTT41mPi5DDVNwg5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.crl rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:3a:d9:a1:89:d9:89:df:bd:51:d5:b3:4a:3c:14:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53296ee33153ef6e6938d57a2a132c1e526dc430 Validity Not Before: Dec 23 22:01:00 2025 GMT Not After : Dec 24 22:01:00 2025 GMT Subject: CN=86f5882e919059f0f5606703a8bd850a20add900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cc:da:f8:73:17:c3:4e:b2:0b:b5:c9:b6:82: 29:53:16:e6:62:ba:75:b5:8d:aa:3e:70:14:8b:8c: a9:a2:ea:8b:5a:1f:b1:54:87:c5:d6:9d:56:7a:1e: a9:44:78:19:7e:a5:de:3c:d2:07:7a:d6:59:97:b4: f8:94:d6:4b:eb:d5:1d:23:b8:18:14:29:d6:1e:ca: 3c:32:ef:bb:4f:43:03:24:40:3f:57:d1:5f:a1:3c: a9:17:ff:ce:91:95:26:86:9a:ee:b5:89:d9:77:f6: 54:b1:b6:60:ce:ee:8d:0e:ad:66:82:c0:29:49:bc: e8:44:8f:a8:4d:ff:d8:ec:d1:70:ea:7e:2b:62:e3: 6e:c1:32:d3:85:80:15:55:dd:d9:bb:3e:b7:9a:93: 0e:fd:89:31:40:02:5a:02:4d:bc:9d:65:2e:a3:e0: 46:4e:a8:24:c7:36:87:59:df:d3:a8:3a:d8:38:e0: b8:d3:18:9b:d5:d3:91:6d:6b:9f:d8:51:78:d1:c3: f2:58:b0:85:87:fa:65:5e:54:cb:91:af:c8:22:c6: 7c:23:92:98:b2:50:ff:41:23:9c:96:7c:c6:99:ff: 60:8b:53:d4:56:c0:58:30:01:d9:80:f4:88:62:60: a2:2b:a3:88:76:f2:e3:38:3d:db:06:a1:5b:92:a8: fe:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F5:88:2E:91:90:59:F0:F5:60:67:03:A8:BD:85:0A:20:AD:D9:00 X509v3 Authority Key Identifier: keyid:53:29:6E:E3:31:53:EF:6E:69:38:D5:7A:2A:13:2C:1E:52:6D:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:4f:c4:7e:03:05:ce:b0:81:8b:4e:49:80:10:31:7e:7c:ca: 85:04:a0:2e:b7:6d:05:be:35:46:22:7a:ba:6f:69:c3:cb:2e: fc:47:66:a3:be:a4:d4:84:e1:35:62:9e:66:1c:1d:7f:fe:bb: b0:de:5c:d7:b2:79:89:67:dc:6f:ec:0b:35:fd:d1:27:7f:db: c6:c2:50:67:ea:38:56:5d:5b:2e:81:5c:c1:38:4e:56:1b:c4: fc:0a:6d:af:c8:01:9a:35:77:57:3e:27:df:84:05:09:63:77: dd:ee:55:5f:d6:cf:5c:2e:bb:f2:41:5e:b1:08:36:b5:29:70: 1e:be:c3:1c:ee:6d:37:20:6f:b2:02:ac:d7:75:5a:e3:df:55: 9f:64:38:cb:97:05:d1:77:1a:01:01:e5:4b:94:1d:b8:f6:51: 24:8d:48:3b:07:39:e5:e2:02:30:ae:04:ed:29:9f:59:5c:af: e7:39:0e:40:f8:bc:74:da:90:bd:03:54:2b:78:ab:86:13:79: 12:61:36:43:50:c2:ea:dc:82:4e:96:72:75:d3:cf:6b:6c:e9: 16:d9:7b:08:db:70:b2:2d:db:c2:05:9e:1a:54:5d:fd:1a:0e: 66:8b:16:3d:a2:e2:75:f5:58:96:6f:84:a9:f1:d2:93:ae:2b: 19:9f:2c:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNOtmhidmJ371R1bNKPBSBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMjk2ZWUzMzE1M2VmNmU2OTM4ZDU3YTJhMTMyYzFlNTI2 ZGM0MzAwHhcNMjUxMjIzMjIwMTAwWhcNMjUxMjI0MjIwMTAwWjAzMTEwLwYDVQQD Eyg4NmY1ODgyZTkxOTA1OWYwZjU2MDY3MDNhOGJkODUwYTIwYWRkOTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcza+HMXw06yC7XJtoIpUxbmYrp1 tY2qPnAUi4ypouqLWh+xVIfF1p1Weh6pRHgZfqXePNIHetZZl7T4lNZL69UdI7gY FCnWHso8Mu+7T0MDJEA/V9FfoTypF//OkZUmhprutYnZd/ZUsbZgzu6NDq1mgsAp SbzoRI+oTf/Y7NFw6n4rYuNuwTLThYAVVd3Zuz63mpMO/YkxQAJaAk28nWUuo+BG TqgkxzaHWd/TqDrYOOC40xib1dORbWuf2FF40cPyWLCFh/plXlTLka/IIsZ8I5KY slD/QSOclnzGmf9gi1PUVsBYMAHZgPSIYmCiK6OIdvLjOD3bBqFbkqj+4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIb1iC6RkFnw9WBnA6i9hQogrdkAMB8GA1UdIwQY MBaAFFMpbuMxU+9uaTjVeioTLB5SbcQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXlsdTR6RlQ3MjVwT05WNktoTXNIbEp0eERBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mOGIzODEtNjkyYS00ODMwLThkN2Qt MjFiZjcwOGYzY2FkLzEvVXlsdTR6RlQ3MjVwT05WNktoTXNIbEp0eERBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9mOGIzODEtNjkyYS00ODMwLThkN2QtMjFiZjcwOGYzY2Fk LzEvVXlsdTR6RlQ3MjVwT05WNktoTXNIbEp0eERBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYk/EfgMF zrCBi05JgBAxfnzKhQSgLrdtBb41RiJ6um9pw8su/Edmo76k1IThNWKeZhwdf/67 sN5c17J5iWfcb+wLNf3RJ3/bxsJQZ+o4Vl1bLoFcwThOVhvE/Aptr8gBmjV3Vz4n 34QFCWN33e5VX9bPXC678kFesQg2tSlwHr7DHO5tNyBvsgKs13Va499Vn2Q4y5cF 0XcaAQHlS5QduPZRJI1IOwc55eICMK4E7SmfWVyv5zkOQPi8dNqQvQNUK3irhhN5 EmE2Q1DC6tyCTpZyddPPa2zpFtl7CNtwsi3bwgWeGlRd/RoOZosWPaLidfVYlm+E qfHSk64rGZ8sXA== -----END CERTIFICATE-----Generated at Wed Dec 24 03:30:55 2025 by rpki-client